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ABSTRACT 


This  report  provides  algorithms  (and  proofs  of  their  correctness) 
which  actualize  the  data-sharing  model  of  "Harmonious  Cooperation  of 
Processes  Operating  on  a  Common  Set  of  Data,  Part  1"  (MTR-2254) .  Also 
included  are  a  sketch  of  the  coordination  of  the  algorithms  in  Part  2 
in  the  operation  of  the  Scheduler  of  Part  1  and  a  brief  analysis  of 
the  storage  required  to  implement  this  version  of  the  Scheduler. 
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SECTION  I 


INTRODUCTION 


THE  INTENT  OF  THIS  REPORT 

The  harmonious  cooperation  guaranteed  by  Theorem  18  of  "Harmonious 
Cooperation  of  Processes  Operating  on  a  Common  Set  of  Data,  Part  1” 
{.called  "HCl"  in  this  report)  depends  on  a  Scheduler  which  evaluates 
each  request  by  a  process  P^  for  a  datum  S^.  The  evaluation  is 
carried  out  using  strategy  a  to  determine  that  granting  a 
request  would  not  cause  conflict  and  would  result  in  a 
safe  situation.  The  latter  condition  will  be  satisfied  if  there  is  a 
safe  permutation  of  the  processes  P  by  Theorems  5  and  7  of  HCl.  It 
is  the  intent  of  this  report  to  provide  concrete  algorithms  for 
making  these  determinations  and  for  handling  the  record-keeping 
involved  when  a  process  releases  data,  reduces  its  claim  lists,  or 
begins  or  ends  its  run.  It  is  always  assumed  that  processes  are  acting 
"harmoniously":  no  error  checks  are  included  in  this  report. 

A  SUMMARY  OF  THE  SITUATION 

The  focus  throughout  this  report  is  a  black  box  called  a  Scheduler 

which  acts  as  a  "librarian"  for  the  data  base  JD  =  (S,R).  As  in  HCl, 

S  =  {S-  ,  .  .  .  ,  S  }  is  a  set  of  elements,  R  is  a  binary  relation  on 
1  m  “ 

S  and  R'  is  a  binary  relation  on  the  elements  of  elements  of  S.  The 

r.oce Sbes  I  =  {P, ,  .  .  .  ,  P  }  make  requests  for  elements  of  S.  The 
—  1  n 

Scheduler  grants  or  ejects  requests  for  elements  of  S  so  that 
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1)  no  conflict  results , 

2)  deadlock  never  occurs ,  and 

3)  no  process  is  permanently  blocked. 

THE  DIRECTION  OF  THE  REPORT 

The  approach  of  this  report  is  to  translate  the  determinations 
the  Scheduler  must  make  into  mathematical  propositions.  The 
algorithms  introduced  provide  an  efficient  way  of  translating  the 
mathematical  propositions  into  routinely  decidable  questions. 

Section  II  addresses  the  question  of  whether  the  granting  of 
a  request  will  result  in  a  safe  situation.  Using  the  approach  of 
HCl,  this  determination  is  made  by  determining  whether  the  resulting 
blocking  graph  of  the  processes  P  would  be  loop-free.  Algorithm  /S 
allows  one  to  determine  whether  the  requesting  process  would  be 
contained  in  a  closed  path  in  the  blocking  graph  if  its  request  were 
granted.  This  section  utilizes  digraph  theory  via  adjacency  matrices. 

_c^'j.on  jll  provides  rigorous  justification  for  recording  the 
potential  blocking  matrix  in  strict  upper  triangular  form.  Using 
matrix  operations  it  is  shown  that  the  existence  of  a  safe  permuta¬ 
tion  of  uhe  processes  P  is  equivalent  to  the  existence  of  a  strict 
upper  triangular  matrix  representation  of  the  potential  blocking 
matrix. 

Section  IV  provides  an  algorithm  for  generating  a  safe  permuta¬ 
tion  of  tzhe  processes  when  it  is  known  that  one  exists.  In  addition. 
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it  provides  a  method  of  altering  the  potential  blocking  matrix  so 
that  it  will  correspond  to  the  current  safe  permutation  A.  Section  IV 
utilizes  matrix  theory. 

Section  V  describes  a  Scorecard  for  keeping  track  of  the  data 
elements  S  ^  .  In  addition,  the  alteration  of  the  Scorecard  under  the 
nine  basic  data  operations  is  described.  Diagrams  giving  capsule 
descriptions  of  the  alterations  of  the  Scorecard  are  included. 

Section  VI  begins  by  describing  how  the  various  algorithms  fit 
together  to  aid  the  Scheduler  in  its  task.  An  analysis  of  the  precise 
storage  requirements  for  this  implementation  of  the  Scheduler  are 
calculated  for  n  processes  using  m  pieces  of  shared  data.  For  example, 
it  is  calculated  that  on  a  256K  word  machine  having  16-bit  words,  64 
concurrent  users  of  1000  files  (each  file  having  no  more  than  64K 
records)  would  require  a  storage  overhead  of  6.44 %  of  the  total  storage 
capacity.  The  section  ends  with  a  short  discussion  of  this  report’s 
functions  and  its  omissions. 
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SECTION  II 


ALGORITHM  jS 


INTRODUCTION 

In  this  section,  a  mathematical  algorithm  is  presented  that  will 
enable  the  Scheduler  to  determine  whether  the  granting  of  a  request 
will  result  in  a  safe  permutation  of  the  processes.  If  the  request 
would  not  result  in  a  safe  permutation,  then  by  definition  the 
blocking  graph  of  the  processes  after  the  request  is  granted  will 
contain  a  closed  path.  If  P  is  the  requesting  process,  then  it  is 
clear  that  P  would  be  contained  in  this  closed  path.  Algorithm  j3 
provides  a  means  of  determining  whether  P  would  be  contained  in  such 
a  closed  path. 

Algorithm  f$  is  an  outgrowth  of  digraph  theory  and  the  particular 
requirements  of  the  data-sharing  task  of  Project  6710.  The  blocking 
graph  of  the  processes  P  is  represented  by  its  adjacency  matrix. 
Algorithm  /S  provides  a  method  of  determining  from  such  an  adjacency 
matrix  whether  a  given  vertex  v^  is  contained  in  a  cycle  in  a  digraph, 
thereby  establishing  whether  the  granting  of  the  request  will  yield 
a  safe  permutation. 


NOTATION 


Let  G  be  a  directed  graph  with  n  vertices  and  let  a  =  (OL^)  ^ ^ 
be  the  associated  0-i  adjacency  matrix:  a  =  1  if  there  is  an  arc 
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from  vertex  v.  to  vertex  v.  and  a. .  =  0  if  there  is  no  such  arc 

i  J  ij 

1  £  i  ^  n,  we  let  0^  =  (a.^,  •  •  •  >  0!^n)  t^ie  Ath  row  °f 

Let  r^  and  r^  be  1  x  n  row  vectors  with  r^  =  (r^,  •  •  •  , 
for  i  =  1,2.  Let  [r^  =  (maxCr^,  r  p  ,  .  .  .  ,  max  (rln. 


.  For 


rin> 


r2n))‘ 


ALGORITHM  £ 

Set  T  =  0^  and  E  =  9,  the  empty  set. 

Step  1:  If  there  is  a  j  £  E  such  that  T.  (the  jth  component  of 

T)  is  not  zero,  replace  T  by  |_T,  Of,  ],  where  is  the  least  such  j, 

J0 

and  replace  E  by  E  U  C Jq  3 • 

Step  2:  If  T\  =  1,  there  is  a  circuit  containing  v^:  stop  the 
algorithm.  If  =0,  repeat  step  1. 

If  it  becomes  impossible  to  perform  step  1,  then  there  is  no 
cycle  in  G  containing  v^. 


ANALYSIS  OF  THE  ALGORITHM 

For  T^  =  t^  represents  the  vertices  of  G  connected  to 

v  by  paths  of  length  1.  If  {j  ,  •  .  .  ,  j.)  are  the  indices  of  the 
I  1  K 

nonzero  components  of  ,  letting  T^  =  [...[[t^\  a.  ],...],  Ct.  ] 

J1  Jk 

gives  a  representation  of  the  vertices  of  G  that  are  connected  to 
v^  by  paths  of  length  s  2.  Repeating  this  procedure,  we  will 
have  T^n+^  =  T^1^  since  no  more  than  n  distinct  rows  can  be  fed 
into  the  process.  Then  T^  represents  all  vertices  that  can 
Le  connected  to  v^  by  paths  of  any  length.  If  T^=  0,  v^  cannot 
be  reached  along  a  path  from  v^,;  if  T^  =  1,  it  can  be  reached.  Hence 
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vi  lies  on  a  cycle  if  and  only  if  T  ^  =  1.  The  algorithm  constructs 
the  in  a  somewhat  different  fashion  and  it  allows  the  process  to 
terminate  at  any  time  that  a  1  appears  in  the  ^th  place  of  the  vector 
T. 


The  algorithm  itself  allows  one  to  feed  in  a  given  row  no  more 
than  once.  In  a  sense,  it  represents  a  cycle  search  with  a  memory 
of  which  vertices  have  already  been  reached. 

In  the  application  of  this  algorithm,  a  significant  reduction 
can  be  made.  The  matrix  a  will  represent  the  potential  blocking 
graph  after  the  granting  of  a  request  for  a  datum.  As  will  become 
evident,  v*e  can  assume  that  a  is  almost  a  strict  upper  triangular 
matrix;  that  is,  =  0  if  i  ^  j  ^  k: 


With  this  restriction  on  0:,  we  can  let  T  be  a  1  x  i  row  vector  and 

ute  the  &  «  (oc.i  y  •  •  •  ,  OL. .)  for  the  a.  in  the  algorithm.  This 
J  jl  Ji  J 

reduction  is  possible  because  for  k  >  j  ,  v,  —h  v.;  if  a  cycle 
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containing  v 
because  each 


exists ,  that  path  does  not  contain  any  where  k  >  i 
vertex  following  in  the  circuit  would  be  of  the  form 


SECTION  III 


UPPER  TRIANGULAR  MATRICES  AND  SAFE  PERMUTATIONS 

INTRODUCTION 

This  section  will  give  theoretical  justification  for  a  matrix 
method  of  recording  potential  blocking  in  an  implementation  of  the 
Scheduler.  It  is  shown  that  if  P  is  loop-free  at  time  Y,  then  there 
is  a  permutation  of  the  processes  P  such  that  the  associated  adjacency 
matrix  is  strictly  upper  triangular.  This  result  is  obtained  using 
permutation  matrices  and  elementary  matrix  operations.  As  mentioned 
at  the  end  of  Section  II,  recording  the  potential  blocking  graph  as 
a  strictly  upper  triangular  matrix  allows  a  definite  reduction  in 
algorithm  0. 

NOTATION  AND  BASIC  FACTS 

Let  P  denote  the  set  of  permutations  on  the  set  {1,  .  .  .  ,  m}. 

— m 

If  6  €  and  1  ^  j  ^  m,  we  will  denote  the  image  of  j  under  5  by 

"j6M.  Let  M  denote  the  set  of  m  x  m  matrices  with  m  components 
— m 

equal  to  one  (others  0),  such  that  each  row  and  each  column  has 

exactly  one  ,,l,,-entry:  I  (the  identity  m  x  m  matrix)  is  in  M^> 

For  6  €  P  ,  let  M(6)  be  the  unique  matrix  (ct.  .)  ,  .  ,  with 

-m*  ijl^i,  j^m 

1,  if  j  =  16 
0,  otherwise  • 
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Clearly  M(6)  CM.  Also,  if  6.  and  6  are  distinct  elements  of  P  , 

“in  1  z  “in 

then  M(6p  and  are  distinct  elements  of  In  addition,  for 

Of  e  M  ,  there  is  a  (unique)  6  e  p  such  that  Of  =  M(6) . 

“m  “Tn 

Consider  6^,  6^  C  P^.  Write  M(6^)  =  (a^)  and  11(62)  =  (/J^) . 

Let  ^Yij^  =  ^aij^  ^ij)  *  clearly> 

1,  if  j  - 

0,  otherwise  . 

Hence  (Y.  .)  =  M(6  6  )  so  that  M(6,)m(6„)  =  M(6,6_).  We  call  M 
J-J  J-  1  z  1  z  — m 

the  set  of  m  x  m  permutation  matrices  and  note  that  M^  Is  in  I  -  1 
correspondence  to  P^  by  the  correspondence  6-***M(6)  •  In  fact,  one 
can  show  that  (X^,  .  .  .  ,  Xm)M(6)  =  (X^,  .  .  .  ,  X^) . 

MAIN  DEVELOPMENT 

Let  the  processes  of  a  sequential  machine  be  P  =  {P- ,  •  •  •  ,  P  }. 

1  n 

Any  6  €  P^  generates  a  permutation  {p^,  .  •  .  ,  P^g]  t^ie  Processes* 

For  a  state  s  of  the  machine  and  any  6  €  P^,  there  is  an  associated 

blocking  graph  G(s,  6).  If  61  e  P  ,  then  G(s,  6)  and  G(s,  61)  are 

n 

isomorphic.  Let  the  adjacency  matrix  of  G(s,  6)  be  denoted  m(s,  6). 

In  general,  m(s,  6)  and  m(s ,  61)  will  not  appear  to  be  related.  In 
fact,  however,  m(s,  6)  and  m(s,  61)  are  conjugates  of  a  very  special 
type. 

Theorem  3,1;  If  6,  61  €  P^,  then  m(s,  6)  -  M(p)  ^  m(s,  6f)M(p) 
for  some  Q  €  P  • 

r  — n 
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t 

-  n 


k=l 


T.  =  T.  .  .  .  T_,  where 
k  1  t 


Proox :  Write  6=6 'p  and  write  p 
ea^n  xj  a  transposition.  We  induct  on  t: 

t  =  1.  Let  t  =  (u,  v) .  For  any  k  and  j  between  1  and  n, 

P,  “*  P.  in  state  s4^P,  .  “*  P.c  in  state  s 
k  j  k6  j6 

<£=>Pk6,  -  P  in  state  s. 

Thus,  m(s,  6')k6,  g,  =  m(s,  6)kg^6»  where  for  any  matrix  a,  a 
denotes  the  (i,  j) -component •  To  simplify  notation,  we  write 
k'  =  k6'  and  j'  =  j6'.  Thus,  m(s ,  6')k^  j.  =  m(s,  ^fc'p^jtp* 

Case  1:  If  k',  j'  ^  {u,  v) ,  k'p  =  k'  and  j 'p  =  j',  so  that 
m(s,  6')kl^,  =  m(s,  6)k.>ji* 

Case  II:  If  k'  |  {u,  v)  and  {j',  t)  =  (u,  v} ,  then  k'p  =  k* 
and  j'p  =  t.  Thus,  m(s,  6')k.u  =  m(s,  6')k.v  and  m(s,  6') 


=  m(s,  6) 


k,u* 


Case  III;  If  j'  ^  {u,  v}  and  k'  e  {u,  v} ,  then  as  in  Case  II, 
m(s,  6')  ,  =  m(s ,  6)vj,  and  m(s,  6')  ,  =  m(s ,  6)ujl. 

Case  IV:  If  {k‘,  r}  =  {u,  v}  =  {j',  t} ,  then  k'p  =  r  and 
j  'p  =  t .  Thus ,  we  have 


m(s,  6')uv  =  m(s,  6)^; 
m(s,  6')uu  =  m(s ,  6)^; 
m(s,  6')  =  m(s ,  6)  ;  and 

v  9  VU  U  V 

m(s,  6')  =  m(s,  6) 

v  ’  'w  uu 
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u  V 


Hence,  m(s,  61)  and  m(s,  6)  agree  in  areas  marked  1;  the  values  in 
rows  u  and  v  are  interchanged  (except  the  corners  marked  2,  2*,  3, 
and  3*)  ;  the  values  in  columns  u  and  v  are  interchanged  (except  the 
corners  marked  2,  2*,  3,  and  3*);  and  the  values  (2  and  2*)  and 
(3  and  3*)  are  interchanged. 

Right  multiplication  of  m(s,  6')  by  M(p)  interchanges  the  u 
and  v  columns  of  m(s,  6);  left  multiplication  of  m(s,  6')M(p)  by 
M(p)  ^  =  M (p  =  M (p)  interchanges  the  u  and  v  rows.  Hence,  the 

description  above  of  m(s,  6)  in  terms  of  m(s,  61)  applies  equally 
well  to  M(p)"1m(s,  6)M(p)  .  Hence,  the  equality  holds. 

Suppose  the  result  holds  when  p  can  be  expressed  as  a  product 
of  t  -  1  transpositions,  t  >  1.  Write  6  =  6 ,pl  T,  where  T  is  a 
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transposition  and  p*  can  be  expressed  as  a  product  of  t  -  1  trans- 
positions.  By  assumption,  m(s,  6'p')  =  M(p')  ^(s,  6')M(  p');  by 
the  case  t  =  1,  m(s,  6)  =  M(T)”1m(s,  6'p')M(T). 


Hence,  m(s,  6)  =  M(t)  Hl(p')  ^m(s,  6*)M(p')M(T) 

=  £m<p')M(T)J  'Vs,  6')  M(p ')M(t) 
=  MCp'^'^Cs,  6')M(p't)  . 


Note:  The  permutation  p  is  unique:  p  =  6(6*) 

For  a  state  s,  let  m(s)  =  {m(s,  6):  6  c  P^}* 

Theorem  3 .2:  If,  for  a  state  s,  P  =  {p^,  •  •  •  ,  Pn}  is  loop- 
free,  then 

(*)  m(s)  contains  a  strictly  upper  triangular  matrix 
(that  is ,  a  matrix  which  has  zero  entries  on  and  below  the  main 
diagonal) . 


Proof;  Let  {pj,  •  •  •  ,  P^}  be  the  safe  permutation  generated 
by  Theorem  5  in  HC1.  Then  by  Theorem  5  for  each  k  e  {1,  .  .  •  ,  n} 
(2)  P*-^P^  for  each  j  €  {k+1,  •  .  .  ,  n}  is  satisfied,  We 
consider  5  f  P^  such  that  P^  =  P^g  for  kc{l,  •  •  •  ,  n}  •  If 
£  i  <  j  ^  n,  condition  (2)  says  that  m(s ,  6)  ^  =  0*  Since 
b  ^  always,  m(s ,  6)^  =  0  for  kc  {l,  .  .  .  ,  n} .  Hence,  m(s  6) 

is  a  str?culy  upper  triangular  matrix. 


Corollary  3.3:  For  a  state  s,  P  is  loop-free  if  and  only  if 
condition  (*)  holds. 
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Proof: 


If  m(s,  6)  is  strictly  upper  triangular,  P  must  be 


loop-free:  if  P.  ,  P.  ,  .  . 

1  2 

<  i,  <  i, ,  a  contradiction. 

P  1 


P^.  is  a  loop  in  P,  i  <  i  .  .  . 

P 


Remark:  Corollary  3.3  can  be  found  in  a  context-free  form  in 
[l,  p.  269]. 
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SECTION  IV 


ALGORITHM  Y 


INTRODUCTION 

Algorithm  y  provides  a  systematic  method  of  generating  a  safe 
permutation  of  the  processes  from  an  arbitrary  permutation  77  when 
the  set  P  of  processes  is  loop-free.  It  also  supplies  a  way  to 
alter  the  potential  blocking  matrix  so  that  it  will  correspond  with 
the  current  safe  permutation  and  thus  preserve  the  advantages  of 
recording  the  potential  blocking  matrix  in  strict  upper  triangular 
form. 

Algorithm  y  uses  elementary  matrix  operations  which  can  be 
performed  routinely  without  actual  matrix  multiplication.  The 
correctness  and  effectiveness  of  algorithm  Y  is  proved  using  matrix 
arguments  while  its  implementation  uses  the  more  prosaic  matrix 
manipulation  techniques  described  in  this  section. 

DEVELOPMENT 

The  effectiveness  of  the  algorithm  will  be  established  by 
repeated  use  of  the  following  lemma: 

Lemma  4.1:  Let  G  be  a  digraph  with  vertex  set  V  = 

lv1,  .  .  .  ,  v^}.  Let  the  n  x  n  0-1  matrix  A^  be  the  adjacency 

Ttatrix  of  G.  Suppose  there  is  a  sequence  [a-  ,  .  .  .  ,  a  }  of  m 

in 

distinct  positive  integers  ^  n  such  that  (A,)  =  1  for 

K  ai,ak+i 
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1  £  k  <  n  and  (A  )  =1  where  the  matrices  A,  are  defined 

n  a  ,a 

recursively  by  Afc+1  =  M^a^  ak+1))AkM((a1>  \+1)).  Then  the  arcs 

(v. 


v  V'  (V  V’  ‘ ’ <Va 


»  V  )  ,  (v  ,  V  )  form  a 

1a  a  a« 

a  n  1 


closed  path  in  G. 


Proof:  By  the  definition  of  the  components  of  A^+1  and 


have  the  following  relations: 

r 


<a>  (Wij " 


14  1>'*  *  "ai *  “k+l' 

<V.j  1£  J  *  (V  Vi1  -  u>  sJ 

<Vi, 1£  1 t  K-  W  -  tJ> t5 

<Vst  1£  (al>  ■  [l>  =  fj-  ^ 


The  following  statement  will  be  established  by  induction: 

For  1  £  k  ^  n,  conditions  (b)  ,  (c)  and  (d)  below  hold  for 
and  the  vertices  V  ordered  relative  to  the  permutation 

(a^  9  •  •  •  »  : 

(b)  if  i  j  1  £  s  ^  k} ,  the  ^th  row  (column)  represents  the 

arcs  of  G  beginning  (ending)  at  V^; 

(c)  if  1  £  i  £  k,  the  a^+^-st  row  (column)  represents  the  arcs 

of  G  beginning  (ending)  at  V  ;  and 

ai 

(d)  the  a^-st  row  (column)  represents  the  arcs  of  G  beginning 
(ending)  at  V  • 

The  case  k  =  1  is  trivially  true  by  the  definition  of  A^. 
Suppose  the  statement  is  true  for  u  where  1  ^  u  ^  n. 
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Let  i  {  {a^,  •  .  .  ,  au+-^3  •  By  conditions  (a),  (b)  and  (c)  for 

u,  the  ith  row  (column)  of  A^+^  satisfies  condition  (b)  for  u  +  1, 

except  perhaps  at  positions  a-  and  a  Now  (A  .,).  =  (A  )  . 

1  u-KL  u+rija^  u  i,i 


u+1 

ana  (A  “  (A  )  .  .  Since  (a.,  .  .  .  ,  a  ,-) 

u+1  i,a  u  i,a-  v  1  u+r 

u+1  1 

=  (a^,  .  .  .  ,  a^)  (a^,  au_^)  »  it  follows  that  the  equations  in  the 
preceding  sentence  are  justified  by  the  fact  that  the  first  equality 


=  1  and 


u+1 


moans  (A  .-)  .  =  l^^(v.  ,  v  )  is  an  arc  in  G^^CA  )  . 

u+l'i^  i  au+1'  u'i,i 

the  second  equality  means  (A  =  1.  Hence,  condition  (b) 

u+l/i,a  , - 
9  u+1 

is  satisfied  for  u+1,  and  condition  (c)  is  satisfied  for  u+1  and 
1  £  i  <  u. 

Not  the  a^-st  row  (column)  of  A^+^  represents  what  the  a^^-st 

row  (column)  of  A^  represents ,  namely  the  arcs  of  G  beginning  (ending) 

at  .  Similarly,  the  a^^-st  row  (column)  of  A^+^  represents 

u+1 

what  tht  a^-st  row  °f  A^  represents,  namely  the  arcs  of  G  beginning 

(ending)  at  v  .  Hence,  condition  (c)  is  satisfied  for  u+1  and  i=u 

a 

u 

and  condition  (d)  is  satisfied  for  u+1. 

The  statement  is  now  proved. 


The  hypothesis  (A,  )  =  1  for  1  ^  k  <  n  implies  that  there 

k  ai,ak+i 


is  an  arc  from  v  to  v  in  G.  The  hypothesis  (A  )  =1 

\  *k+l  n  al’a2 

implies  that  there  is  an  arc  from  v  to  v  These  arcs  are  the 

r  a  a, 

u  1 

closed  path  of  the  lemma. 
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ALGORITHM  Y 


Let  the  state  of  the  machine  be  s^.  For  any  permutation  IT  of 

the  first  n  integers,  when  P  =  fp.,  .  .  .  ,  P  },  let  m(s.  77)  be  the 

I  n  V 

potential  blocking  matrix  relative  to  the  permutation  77:  the  (i,  j)- 
component  of  m(s^,  7 7)  is  1  if  t  in  state  s^  and  is  0  other- 

vise. 

Let  77  be  any  permutation  on  (l,  2,  .  .  ,  ,  n]  and  suppose  P  is 

loop-free  in  state  s^.  Then  the  potential  blocking  graph  of  p  at 

state  s^  has  no  closed  paths.  Set  a  =  m  (s^ ,  7 7). 

Step  1:  Find  the  greatest  s  such  that  a  =  1  for  some  u  <  s. 

Step  2:  Find  the  least  t  <  s  such  that  a  =1. 

- —  st 

Step  3:  Replace  a  by  M(s,  t)c*M(s,  t)  and  77  by  77(s,  t)  . 

After  Step  3,  repeat  Step  2,  if  possible.  If  Step  2  is  not 
possible,  repeat  Step  1,  if  possible.  (If  it  is  possible  to  repeat 
Step  1,  the  new  sf  will  be  smaller  than  s,  as  will  be  explained.) 

If  Step  1  is  not  possible  at  any  time.  Of  is  a  strictly  upper  triangular 
matrix,  or  equivalently,  77  is  a  safe  permutation. 

ANALYSIS  OF  THE  ALGORITHM 

After  Step  1,  we  know  that  -  0  for  i  >  s  and  after  Step  2 

that  a  .  =  0  for  j  <  t.  Since  Step  3  interchanges  the  s  and  t  rows 
s  J 

and  columns  of  a  and  the  s  and  t  columns  are  0  below  the  s  row,  the 
uew  O'  also  has  0  below  the  s  row.  Suppose  after  m  repetitions  of 
Step  2  are  done  for  a  given  s  of  Step  1  and  a  given  t  of  Step  2, 
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there  is  a  1  in  the  (s,  t)  position  of  a.  The  algorithm's  operation 
makes  leircoa  4,1  applicable,  so  that  there  would  be  a  closed  path 
including  in  the  potential  blocking  graph  in  state  s^.  That  is, 

r  would  have  a  loop,  contrary  to  assumption.  Hence,  the  algorithm 
can  clear  Of  of  l's  in  the  s-row  without  introducing  l's  below  the 
s-row  and  under  the  main  diagonal.  Clearly,  at  most  s  -  t  repetitions 
of  Step  2  with  this  s  will  clear  row  s  of  l's  and  at  most  n-1  repeti¬ 
tions  of  Step  1  would  clear  all  rows  of  l's  below  the  main  diagonal. 


18 


SECTION  V 


A  SCOREKEEPER  FOR  HARMONIOUS  COOPERATION 


INTRODUCTION 

The  operation  of  the  Scheduler  in  HC1  depends  on  an  algorithm 
which  processes  a  request  for  a  datum  and  responds  in  the  following 
way : 

1)  it  determines  whether  granting  the  request  would  cause 
conflict,  and,  if  so,  the  process  is  added  to  the  (£  queue^; 

2)  if  granting  the  request  would  not  cause  conflict,  it  also 
generates  the  potential-blocking  vector  of  the  requesting 
process  P^. 

In  addition,  an  algorithm  to  process  releases  of  data  and  the 
beginnings  and  ends  of  process  runs  is  necessary.  Both  algorithms 
are  encompassed  in  the  Scorekeeper  algorithm  described  below. 

DESCRIPTION  OF  THE  SCORECARD 

The  Scorekeeper  can  record  both  the  current  allocation  of  data 
and  the  future  claims  on  the  data  base  in  an  n  x  m  x  4  matrix  and 
an  n  x  2  matrix,  both  with  entries  of  0  and  1.  The  n  x  m  x  4  matrix 
will  be  called  the  UVQJ  matrix,  the  n  x  2  matrix  will  be  called 
the  K-matrix  (after  the  notation  in  HC1) ,  and  the  aggregate  will  be 
called  the  Scorecard. 

■'’As  described  in  HC1. 
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A.  The  JVQJ  Matrix 

The  UVQJ  matrix  will  be  considered  to  be  4  n  x  m  matrices, 

referred  to  as  the  Use  layer,  the  V  layer,  the  Q  layer,  and  the  J 

layer,  the  letters  corresponding  to  the  notation  in  HC1  for  the 

prescribed  Limits  on  each  process’s  data  needs.  The  (i,  j)- 

component  of  the  V  (Q,  J)  layer  is  1  if  process  has  included 

datum  S.  -n  V,  (U ,  ,  J.)  and  is  0  otherwise.  Since  V,  Q,  and  J  are 

j  i  i’  i  ’  ’ 

pairwise  disjoint,  at  most  one  of  those  layers  will  have  a  1-en: ry 
in  any  given  (i,  j ) -component .  If  is  using  datum  S^.  at  sfatp 

the  Use  layer  will  have  a  1  in  the  (i,  j ) -component ;  otherwise, 
the  (i,  j ; -component  is  0.  The  Use  layer  will  be  relatively  cccive 
as  the  machine  runs,  while  the  remaining  layers  will  remain  relatively 
static.  In  fact,  the  V,  Q,  and  J  layers  will  change  only  when  a 
process  begins  or  ends  its  activity  or  when  a  process  relinquishes 
its  claim  on  a  given  datum.  Figure  1  gives  a  visualization  of  the 
UVQJ  matrix. 

B .  K-matrlx 

The  K-matiix  records  the  elements  of  elements  of  S  in  use 


during  stuce  s  :  ir  P .  is  using  a.  e  S.  during  s  ,  row  i  will  have 
°  v  i  Ju  J  v 

tii a  tuple  (j  ,  u)  ;  if  P_^  is  not  using  anything  in  inquiry-use  mode, 
row  i  will  ha</e  the  duple  (0,  0). 
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Pn 


A 


O' 


a 

M 


& 


*rl 
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USE  OF  THE  SCOREKEEPER 


The  use  of  the  Scorekeeper  will  be  divided  into  nine  parts — 
beginning  a  process’s  run,  requests  for  an  element  of  S  in  the 
write,  read,  or  inquiry-use  mode,  the  request  for  a  subelement  (that 
is,  an  element  of  an  element  of  S) ,  the  release  of  an  element  of  S, 
the  release  of  a  subelement,  a  reduction  of  future  claims,  and  tne 
end  of  a  process’s  run. 

In  the  course  of  this  section,  two  operations  (which  art.  au  y^t 
undefined)  will  appear  a  number  of  times.  The  first  operation 
determines  whether  the  granting  of  a  request  would  result  in  u  safe 
permutation.  The  input  of  this  operation  is  a  1  x  n  vector  C  whose 
entries  are  0  or  1  and  the  output  could  be  described  as  the  set 
(safe,  not-saf e} .  We  shall  denote  this  operation  by  "SAFETY (C) ” , 
and  we  shall  describe  it  in  more  detail  in  Section  VI.  The  second 
operation  generates  a  new  safe  permutation  and  alters  the  potential 
blocking  matrix  a  to  match  the  new  permutation.  We  shall  denote 
this  operation  "UPDATE”,  and  we  shall  present  a  full  description  in 
Section  VI. 

Another  operation  which  occurs  regularly  in  this  section  involves 
r±  determination  of  those  indices  k  such  that  k  =  \  or  that  S;*"^Sf. 

*  j 

This  determination  is  necessary  to  check  for  conflict  and  to  generate 
tne  potential-blocking  vector  which  would  result  from  granting  a 
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specific  request.  We  will  let  INDEX(j)  be  defined  as  the  set 

2 

{k:  k  =  j  or  S^-^S  } . 

k  j 

The  remainder  of  this  section  is  devoted  to  a  description  of 

the  Scorekeeper  algorithm  in  the  nine  basic  situations.  The 

description  of  the  action  taken  in  each  situation  will  begin  with 

a  precis  of  the  action  required  by  the  third  model  of  HC1.  This  is 

followed  by  a  description  of  the  action  taken  by  the  Scorekeeper 

algorithm  juxtaposed  with  a  diagram  of  that  action. 

1 .  begins  its  run  and  declares  its  claim  lists  V^,  Q^,  : 

This  action  will  alter  the  V,  Q,  and  J  layers  and  it  will  cause 

an  alteration  of  the  potential  blocking  matrix  ot.  In  particular, 

the  lists  Q^,  V^,  and  are  entered  in  the  Q,  V,  and  J  layers. 

Then  for  each  process  it  is  determined  whether  P^  potentially 

blocks  P  :  if  P,  potentially  blocks  P  ,  a  is  set  equal  to  1. 

i  R  i  A^A^ 

The  result  of  the  preceding  operation  is  (possibly)  to  add  l's  to 

the  A^-column  of  a.  Thus,  the  last  operation  that  needs  to  be 

performed  is  UPDATE  to  restore  a  to  strict  upper  triangularity. 

Figure  2  describes  the  Storekeeper's  action  in  this  situation. 

After  the  claim  lists  are  entered,  the  Use  row  for  each  process 

P  is  checked.  If  Use  =  1,  P,  is  using  S  in  some  mode.  A  check 

k  k j  k  j 

of  the  (k,  j) -components  of  the  V,  Q,  and  J  layers  will  determine 

20ne  should  note  that  if  the  relation  R,  defined  on  elements 
of  S,  is  equality,  then  INDEX(j)  =  (jT  and  that  the  Scorekeeper 
algorithm  becomes  greatly  simplified. 
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P.  declares  claim  lists  V.,  Q.,  and  J 
1  i  l’  i 


1.  V.,  Q.,  J.  are  entered  in  the  UVQJ  matrix 

ill 

2.  frur  each  k 

a.  For  each  i  with  Use,  .  =  1 

kj 

1.  The  mode  M,  .  in  which  P,  uses  S.  is  determined 

kj  k  j 

2.  While 

a.  M,  .  =  W  and  V  OR  Q,  .  OR  J  =  1;  or 

^1  ij  kj  ij 

b.  M.  f  =  R  and  VJ  .  OR  J,  ,  =  1;  or 

kj  ij  ij 

c.  M.  .  =  I  and  V.  .  OR  Q .  .  =  1; 

kj  ij  ij 


•P^  because  of  ; 


3.  While  P, 


-P .  because  of  S.; 

i  j 


a.  a 


\’Ai 


b.  Consideration  of  k  +  1  is  begun; 


Else  consider  next  j*  with  Use7  =  1 


b.  Continue  with  k  +  1 
3.  Perform  UPDATE 


Figure  2.  A  Process  Begins  Its  Run 


T 


T 


the  mode  in  which  P  is  using  S  .  If  V  =  1,  then  P  potentially 

K  J  kj  k 

blocks  if  is  listed  in  any  of  P^'s  claim  lists  (that  is,  if 

V  OR  Q  OR  J  =1).  If  V  =  0  and  Q  =  1,  then  P  potentially 
lj  kj  ij  kj  kj  k 

blocks  P^  if  is  claimed  in  write  or  inquiry-use  mode  (that  is, 

if  V  OR  J  =1).  If  V  =0  and  Q  =0,  then  (assuming  as  we 
lj  kj  ij 

are  that  P,  has  access  to  S.)  J  =1  and  P  potentially  blocks  P 

k  J  kj  k  1 

if  S  is  claimed  in  write  or  read  mode  (that  is,  if  V  OR  Q  =1). 

J  J  J 

If  it  is  determined  that  P^  does  potentially  block  P_^,  it  is  no 
longer  necessary  to  check  the  rest  of  the  data  P^  is  using.  A  1  is 
entered  in  the  (A^,  A^) -component  of  a:  process  P^CP^)  is  in 
position  A^(A^)  in  t^le  current  safe  permutation  A.  The  search  then 
continues  by  considering  the  next  process  P^^-  If  P^  does  not 
potentially  block  P_^,  then  consideration  of  P^^  is  begun.  After 
all  the  processes  have  been  considered,  a  may  no  longer  be  strictly 
upper  triangular,  and  UPDATE  is  performed  to  rectify  the  situation. 

2 .  P^  requests  S^,  in  write  mode; 

Granting  this  request  would  result  in  conflict  if  any  other  process 
is  using  any  S  (k  e  INDEX(j))  in  any  mode.  If  granting  the  request 

K 

would  not  result  in  conflict,  P^  would  potentially  block  any  process 
that  had  in  its  V,  Q,  or  J  list  for  any  k  e  INDEX(j).  Figure  3 
describes  the  investigation  of  this  request  as  carried  out  by  the 
S corekeeper . 

It  for  any  k  e  INDEX(j) ,  the  kth  column  of  the  Use  layer  has 
a  1  in  it,  the  granting  of  P^'s  request  would  cause  conflict  and 
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Operation  W 


Figure  3 


The  Investigation  of  a  Write  Mode  Request 
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is  queued.  If  no  conflict  would  occur,  the  kth  columns 

T  T 

(k  e  INDEX(j))  of  the  V,  Q,  or  J  layers  are  ORed:  this  operation 
will  be  called  Operation  W.  The  result  of  Operation  W  is  a  vector 
C*  whose  lfs  indicate  which  processes  would  potentially  block  as  a 
result  of  the  granting  of  this  particular  request.  Since  V  =  1, 
the  vector  C*  has  a  1  in  the  _ith  place;  this  1  is  removed,  creating 
a  vector  C  and  SAFETY (C)  is  performed.  If  SAFETY (C)  determines  that 
granting  this  request  would  yield  a  safe  permutation,  the  request 
is  granted,  a  1  is  put  in  the  (i,  j) -component  of  the  Use  layer  to 
record  P^'s  current  access  to  S^ ,  and  UPDATE  is  performed. 

3 .  P^  requests  S^.  in  read  mode: 

Granting  this  request  would  result  in  conflict  if  any  other 

process  is  using  any  S^  (k  e  INDEX(j))  in  either  write  or  inquiry-use 

mode.  If  granting  the  request  would  not  result  in  conflict,  P 

would  potentially  block  any  process  that  had  any  S^  (k  e  INDEX(j)) 

in  its  V  or  J  list.  Figure  4  describes  the  investigation  of  the 

request  as  carried  out  by  the  Scorekeeper. 

If  for  any  k  e  INDEX(j),  the  _kth  column  of  the  Use  layer  has  a 

1-entry,  then  the  determination  of  whether  the  granting  of  P^'s 

request  would  cause  conflict  can  be  made  with  one  check.  Suppose 

Use  ,  =  1.  If  0  ,  =  0,  P  is  using  S,  in  a  mode  other  than  the  read 
uk  uk  u  k 

mode  and  conflict  would  result  if  P^s  request  were  granted:  Pi  is 


queued.  If  Q  ,  =  1,  P  is  reading  S  .  If  Use  f  =  1  where 
n  uk  u  k  vk 

k?  e  INDEX(j),  P  must  be  reading  S^f  ,  since  otherwise  there  would 
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Figure  4.  The  Investigation  of  a  Read  Mode  Request 
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have  been  conflict  before  made  his  request  and  conflict  is  never 
allowed  by  the  Scheduler.  Hence,  one  check  in  the  Q  layer  is 
sufficient  to  approve  or  disapprove  P^’s  request  on  the  basis  of 
conflict.  If  no  conflict  would  ensue,  the  Operation  R  is  performed: 
OR  the  k-columns  (k  e  INDEX(j))  of  the  J  and  V  layers  to  produce  a 
vector  CT.  As  in  1  above,  Cf  represents  the  potential  blocking  of 

as  a  result  of  the  granting  of  his  request,  except  that  a  1  appears 
in  the  ith  position.  The  vector  C  is  created  from  CT  by  putting  a 
0  in  the  _ith  place,  and  SAFETY (C)  is  performed.  If  a  safe  permutation 
would  not  result  from  granting  this  request,  P^  is  queued;  if  a 
safe  permutation  would  result,  P^  is  granted  his  request,  a  1  is  put 
in  the  (i,  j) -component  of  Use  and  UPDATE  is  performed. 

4.  P^  requests  in  inquiry-use  mode: 

Granting  this  request  would  result  in  conflict  if  any  other 
process  is  using  any  S  (k  e  INDEX(j))  in  write  or  read  modes.  If 

rC 

granting  the  request  does  not  result  in  conflict,  P^  would  potentially 
block  any  process  that  has  S  (k  e  INDEX(j))  in  its  Q  or  V  list. 

rC 

Figure  5  describes  the  investigation  of  this  request  carried  out  by 
the  Scorekeeper. 

If  for  any  k  e  INDEX(j)  the  kth  column  of  the  Use  layer  has  a 

1-entry,  then  a  single  look  at  the  J  layer  will  determine  whether 

conflict  will  result.  If  Use  =  1,  we  look  at  J  .  If  J  ,  =  0, 

vk  vk  vk 

p  is  using  S,  in  a  mode  other  than  inquiry-use  and  conflict  would 
v  k 

result  from  granting  P^’s  request:  P^.  is  queued.  If  J  =  1,  every 
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Figure  5.  The  Investigation  of  an  Inquiry-Use  Mode  Request 


30 


I 


process  using  any  S  f  (k  c  INDEX(j))  is  using  S  ,  in  inquiry-use 

k  k 

mode.  Next,  Operation  J  is  performed:  OR  the  k-columns 
(k  e  INDEX(j))  of  the  Q  and  V  layers.  As  before,  a  potential 
blocking  vector  C!  is  created,  C  is  made  by  putting  a  0  in  the  ^Lth 
position  of  Cf ,  and  SAFETY(C)  is  performed.  If  the  new  permutation 
would  not  be  safe,  is  queued.  If  the  permutation  would  be  safe, 
is  granted  his  request,  a  1  is  put  in  Use _ ,  and  UPDATE  is 
performed . 


5.  P.  requests  a.  e  S.  e  I,: 

Granting  this  request  would  result  in  conflict  if  any  other 

process  is  using  a  3  e  S,  (k  e  INDEX(j))  where  .  .  Since  the 

k  j  u 

definition  of  potential  blocking  does  not  include  any  consideration 
of  the  ,  it  is  not  necessary  to  generate  a  potential  blocking 
vector  C  nor  to  perform  SAFETY (C).  Figure  6  describes  the  investiga¬ 
tion  of  this  request. 

The  set  V  of  elements  of  elements  of  S  related  to  a,  by  the 

ju 

relation-^-^is  determined.  If  (k,  v)  appears  in  the  K-matrix  where 
a^v  £  conflict  would  result  from  granting  this  request  so  that 
must  be  queued.  If  no  such  (k,  v)  appears  in  the  K-matrix,  the 
request  is  granted  and  the  duple  (j  ,  u)  is  put  into  the  ^Lth  row  of 
the  K-matrix. 

6 .  P_^  relinquishes  access  to  S^  : 

This  action  will  leave  the  potential  blocking  matrix  unchanged 
or  will  replace  some  lfs  on  row  A  with  0fs.  Figure  7  summarizes 
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Figure  6.  The  Investigation  of  a  Request  for  a  Subeleuenc 
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J 


Figure  7.  The  Release  of  a  Datum 


Figure  8. 


Releases  a  Subelement 
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Figure  9.  The  Reduction  of  a  Claim  List 


Figure  10.  A  Process  Finishes 
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the  action  of  the  Scorekeeper. 

The  (i,  j ) -component  of  the  Use  layer  will  be  set  to  0  to 
indicate  that  P^  is  not  using  .  The  potential  blocking  vector  of 
now  needs  to  be  recalculated.  This  is  done  by  applying  the 
appropriate  operation — W,  R,  or  J — for  each  datum  S^_  that  P^  is 
still  using.  The  calculation  of  the  blocking  vector  is  completed 
and  UPDATE  is  performed. 

7.  P^  relinquishes  access  to  £  S,  e  1^: 

Since  the  definition  of  potential  blocking  does  not  involve 

the  contents  of  the  K.,  P's  relinquishing  a.  does  not  alter  the 

i  i  ju 

potential  blocking  matrix.  Hence,  the  only  action  necessary  when 
P^  releases  some  subelement  is  to  clear  the  _ith  row  of  the  K-matrix. 
Figure  8  depicts  this  action. 

8.  P.  releases  S.  from  its  claim  list: 

- j - 

This  action  will  leave  the  potential  blocking  matrix  unchanged 
or  will  replace  some  1 1 s  on  column  with  Os.  Figure  9  summarizes 
tne  action  of  the  Scorekeeper  in  this  situation. 

If  P.  wants  to  delete  Sf  from  its  limit  list  L,  (where 

i  j  i 

L  e  {V,  Q,  J},  the  (i,  j) -component  of  the  L  layer  is  set  equal  to 
0.  The  column  vector  which  indicates  which  processes  potentially 
block  P^  rfter  this  deletion  is  next  calculated.  If 


A  =  (Ar 


,  A  )  is  the  current  permutation  such  that 


n 


-1 


a  =  m(s  ,  A)  and  B  =  A  ,  one  proceeds  by  finding  processes  P 

v  . 
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who  wert  potentially  blocking  P^  before  the  deletion  and  determining 

whether  they  potentially  block  P^  after  the  deletion.  This  is  done 

by  finding  t  with  a  =1  and  then  finding  u  with  Use  =  1  and 

t,A_^  t,U 

then  finding  u  with  Use_>  =  1.  For  every  pair  (t,  u)  of  this  type 

ju 

we  set 


0R<Vir’V> 

J »  : 
lr 

r  e  INDEX(u) ,  UseD 

,u 

'  »  “  VE  ,u  *  1 
t 

a  =  < 

tA.  | 

0R(V  ,J.  : 
lr  lr 

r  e 

INDEX(u) ,  Use  =  1) 

,u 

if  QR  u  =  1 

Bt,U 

0R<Vir’l)lr: 

r  e 

INDEX(u) ,  Use  =  1) 

Bt  >u 

if  Jn  =  1  . 

Bt,u 

That  is ,  a  is  set  equal  to  1  if  and  only  if  P.  has  placed  a 

c  ,A^  l 

future  claim  on  a  datum  S  S  and  the  claim  is  in  a  mode  which 

r  u 

could  cause  conflict  with  P  . 

Bt 

9.  finishes: 

This  operation  is  the  easiest  to  deal  with.  P^  is  no  longer 
potentially  blocked,  potentially  blocks  no  one,  and  his  Scorecard 
is  0.  Figure  10  summarizes  the  Scorekeeper 1 s  action  for  this 
operation. 

The  rows  and  columns  of  the  potential  blocking  matrix  a  are 
filled  with  0's,  and  the  _ith  rows  of  Use,  V,  Q,  J,  and  K  are  filled 
with  0’s.  The  vector  C  is  set  equal  to  0  because  use  is  made  of  C 
in  performing  UPDATE. 
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SECTION  VI 


AN  OVERVIEW  OF  THE  OPERATION  OF  THE  SCHEDULER 

INTRODUCTION 

In  this  section  the  use  and  interrelations  of  the  algorithms 
in  previous  sections  of  this  paper  are  described.  In  addition,  the 
operations  SAFETY (C)  and  UPDATE  are  specified.  Finally,  brief  analysis 
of  this  implementation  of  HCl's  model  is  given  in  terms  of  necessary 
storage  space  for  the  matrices  and  vectors  of  the  algorithms. 

DESCRIPTION  OF  THE  OPERATION  OF  THE  SCHEDULER 

Assume  that  the  Scheduler  is  to  handle  n  processes  concurrently 
and  that  the  data  base  has  m  pieces  of  data.  The  plan  of  implementa¬ 
tion  presented  in  this  paper  requires  the  following  apparatus: 

1)  an  n  x  n  potential  blocking  matrix  a; 

2)  a  1  x  n  vector  A  for  recording  the  current  safe  permutation 
and  a  1  x  n  vector  B  to  record  the  inverse  of  A; 

3)  two  1  x  n  vectors,  T  and  E,  for  use  in  algorithm  0  for 
checking  for  a  safe  permutation; 

4)  the  Scorecard,  consisting  of  the  n  x  m  x  4  UVQJ  matrix  and 
the  n  x  2  K-array;  and 

5)  a  1  x  n  vector  C  for  use  in  calculating  potential  blocking 
vectors . 

Al  time  A  =  B  =  (1,  .  .  .  ,  n)  and  every  other  vector  or 
matrix  is  set  equal  to  0. 
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When  a  process  P^  begins  its  run,  it  is  put  in  queue  T_y  the 
temporary-holding  queue,  if  _B,  the  special-attention  queue,  is  non¬ 
empty  and  it  is  put  into  .E,  the  set  of  running  processes,  if  B  is 
empty.  In  any  case,  the  Scorekeeper  performs  the  necessary  bookkeeping 
to  recoid  P^’s  claim  lists  and  to  correct  the  potential  blocking 
matrix  (as  described  in  Section  V) . 

When  P^  requests  a  datum  S_.  ,  the  request  is  processed  as 
described  in  Section  V.  The  first  check  is  for  conflict.  If  conflict 
would  occur,  the  request  is  denied  and  is  queued  on  (£.  If  conflict 
would  net  occur,  the  vector  C  is  generated  (as  described  in  Section  V) 
which  shows  those  processes  P^  would  potentially  block  because  of 
his  access  to  S_.  if  his  request  were  granted.  Then  SAFETY(C)  is 
performed,  as  described  here.  First,  T  is  set  equal  to 

OR(°Ia  >  (^A  y  ^a  *  *  *  *  *  ^a  ^  where  C  —  (C^,  •  •  •  ,  C^)  •  This 
i  1  2  n 

rearrangement  is  necessary  because  the  Scorecard  keeps  records 
relative  to  the  identity  permutation  I  whereas  the  matrix  a  keeps 
records  relative  to  the  current  safe  permutation  A.  The  A_^-th  row 
of  a  is  ORed  with  the  rearranged  vector  C  because  C  records  only 
the  potential  blocking  of  P_^  due  to  his  possession  of  S_.  .  Algorithm  3 
is  run  on  T  with  the  vector  E  keeping  track  of  which  rows  have 
^lreauy  been  ORed  into  T  (as  described  in  Section  II) :  when  row  k 
of  a  is  ORed  into  T,  a  1  is  put  in  E^.  The  determination  in 
algorithm  3  whether  there  is  a  j  f:  E  with  T  f  0  is  made  by  sweeping 
T  and  at  any  1  checking  the  same  entry  of  E:  if  there  is  a  1, 


continue  the  sweep;  if  there  is  a  0,  a  1  is  added  and  the  appropriate 
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row  of  a  is  ORed  into  T.  If  algorithm  3  determines  that  the  resulting 
permutation  would  not  be  safe,  SAFETY(C)  =  not-saf e  and  is 
queued.  If  SAFETY(C)  =  safe,  P_^  is  granted  his  request  for  S.,  a  1 
is  put  at  Use_^  (as  described  in  Section  V),  and  UPDATE  is  performed. 
The  vector  C  is  ORed  into  the  potential  blocking  matrix  a,  relative 
to  the  safe  permutation  A.  That  is,  aA  =  (a.  a.  )  and 


V1’ 


A^n 


(C  ,  •  •  •  ,  CA  )  are  ORed  to  create  a  new  A. -row  for  the  matrix. 

A-  A  1 

1  n 

The  last  action  in  UPDATE  of  the  Scheduler  is  algorithm  y  (described  in 
Section  IV).  Matrix  a  may  now  no  longer  be  a  strictly  upper 
triangular  matrix.  Each  nonzero  entry  of  a  is  removed  by  an  inter¬ 
change  of  a  pair  of  rows  and  columns.  If  the  i^h  and  j_th  rows  and 
columns  are  switched,  then  the  values  A_^  and  A^  are  switched  and  the 

values  Ba  and  BA  are  switched.  After  this  action  A  will  still 
A.  A. 

i  J 

represent  the  ''current”  safe  permutation  so  that  a  =  m(s  A)  and 

Vt  l , 

B  =  A  1.  It  might  be  noted  that  the  switch  of  B^  and  B^  can  be 

i  j 

made  either  before  or  after  the  switch  of  A^  and  A_.  ;  the  result  is 
the  same. 

When  a  process  releases  a  datum,  the  Scheduler  alters  the 
Scorecard  and  the  matrix  a  as  described  in  Section  V.  The  algorithm 
in  Section  IV  of  HC1  concerning  the  release  of  a  datum  is  performed 
next.  In  essence,  the  special  priority  queue  is  checked  and 
mptied  if  possible.  If  _B  is  emptied,  all  the  processes  suspended 
in  the  temporary  queue  T  are  allowed  to  begin  their  run.  If  B^ 

.annot  be  emptied  (or  if  it  was  empty  to  begin  with),  the  queue  £ 
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is  swept  in  order.  Each  process  in  the  queue  has  his  last  request 
reprocessed  as  outlined  in  the  preceding  paragraphs.  If  the  element 
that  had  been  requested  is  available  (viz.,  if  that  element  was 
just  released)  and  the  granting  of  the  request  is  permissable,  the 
request  is  granted  and  the  process  is  removed  from  the  queue  (£.  If 
the  element  is  available  but  the  granting  of  the  request  is  not 
permissable,  then  the  process  is  put  in  queue  B.,  if  it  is  empty, 
and  all  processes  wanting  to  enter  the  system  are  queued  in  T\  If 
there  are  several  processes  whose  requested  element  is  now  available 
and  whose  request  is  still  not  permissable,  then  the  first  such 
process  in  will  be  put  into  queue  B.  and  the  others  will  be  left 
in  queue 

The  Scheduler's  actions  under  a  reduction  of  a  claim  list  or 
an  end  of  a  process’s  run  are  treated  in  Section  V.  The  Scorecard 
entries  of  the  process  are  altered  and  the  potential  blocking  matrix 
a  is  altered  by  recalculating  the  potential  blocking  (or  potentially 
blocked)  vector  of  that  process  and  entering  it  in  a  and  by  performing 
UPDATE.  In  addition,  after  a  process  ends  its  run,  a  queue  search, 
exactly  as  that  described  in  the  paragraph  above,  is  initiated. 

The  preceding  paragraphs  provide  a  complete  functional  de- 
ocription  of  the  operation  of  the  Scheduler.  Moreover,  the  entire 
operation  cf  the  Scheduler  is  encompassed  in  the  algorithms  of  this 
paper  presented  tn  this  section. 
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ANALYSIS  OF  STORAGE  REQUIREMENTS 

The  description  of  this  section  allows  immediate  calculation  of 
the  storage  requirements  for  this  realization  of  the  model  of  HCl. 

It  can  be  shown  that  the  positive  integer  n  can  be  expressed  with 
N  binary  digits,  where  N  =  [log  ^  nl  +  6,  6  =  0  or  1.  Similarly,  set 
M  =  [log  m]  +  Y,  y  =  0  or  1.  The  various  parts  of  the  Scheduler 
algorithms  then  require  the  following  amounts  of  storage: 


n  bits; 
nN  bits  each; 
n  bits  each 
4nm  bits ;  and 
n(M-Hc)  bits, 


the  matrix  O' 
the  vectors  A  and  B 
the  vectors  C,  T,  and  E 
the  UVQJ  matrix 
the  K-array 

where  an  identification  for  an  element  of  an  element  of  the  data  base 
requires  no  more  than  k  bits.  Setting  k  =  [log 

where  j  is  the  maximum  number  of  elements  in  an  element  of  S  will 
usually  be  sufficient.  The  total  necessary  storage  is 

+  n(2N  +  4m  +  M  +  k  +  3)  ;  of  this  total,  only  n^  +  n(2N  +  3m  +  3) 
bits  are  required  if  the  inquiry-use  mode  is  eliminated  from  the 
model,  as  in  Section  V  of  HCl. 

As  an  example,  suppose  a  256K  word  machine  with  16-bit  words  is 
to  be  used  to  provide  data-sharing  for  64  concurrent  users  of  1000 
files,  each  with  no  more  than  64,000  records.  Since  64,000  can  be 
expres  ,ed  with  16  binary  digits,  we  can  set  k  -  16.  With  n  =  64  -  2^ , 
N  =  6.  Further,  m  =  1000  so  that  the  Scheduler  would  require 
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261! ,720  bits  of  storage  or  16,420  words.  On  a  256K  machine,  this  is 
an  overhead  of  about  6.42%  of  the  total  storage.  If  the  inquiry  t^e 
mode  were  omitted,  only  197,056  bits  =  12,316  words  are  needed,  vi 
4* / 24  overhead.  If  the  number  of  files  were  only  500,  the  respective 
overhead  ligures  would  be  3.28%  and  2.46%. 

It  should  be  kept  in  mind  that  the  figures  above  do  not  taxe 
into  account  the  storage  space  necessary  for  (i)  the  programs  vhich 
actualize  the  algorithms  and  (ii)  the  space  necessary  for  the  indexing 
necessary  for  the  matrices  and  vectors  involved.  The  storage  estimates 
include  only  the  space  necessary  for  the  bulk  information  required 
by  this  method  of  realizing  HCl's  model. 

CONCLUDING  REMARKS 

This  papei  has  presented  one  particular  realization  of  the 
Scheduler  of  HC1.  A  set  of  record-keeping  devices  and  algorithms 
for  their  use  have  been  suggested  and  a  dynamic  description  of  the 
functioning  Scheduler  has  been  provided.  In  addition,  full 
theoretical  justification  for  the  algorithms  has  been  presented, 
showing  both  that  the  algorithms  are  correct  and  that  they  are 
actually  realizable  (in  the  sense  that  every  algorithm  will  indeed 
terminate) . 

It  should  be  recognized  that  the  important  determination  of  the 
jts  iNbCXvj)  has  bwen  everywhere  ignored.  This  deLcuiiJ-nation  is 
directly  dependent  on  the  relations  R  and  Rf ,  which  relations  are 
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very  system-dependent.  Since  the  nature  of  R  and  R'  and  thus  the 
determination  of  the  sets  INDEX(j)  will  always  be  idiosyncratic  to  a 
particular  situation,  it  was  decided  that  a  general  treatment  of  that 
problem  would  not  be  presented  in  this  paper. 

The  analysis  of  storage  requirements  in  Section  VI  provides  not 
only  a  measure  of  the  space  needed  to  implement  the  Scheduler  in  a 
given  data-sharing  situation,  but  also  a  rough  numerical  gauge  for 
comparing  the  model  of  HC1  as  realized  in  this  paper  with  other 
data-sharing  models  which  may  be  under  consideration.  In  a  direct 
way,  therefore,  this  paper  is  a  first  tangible  (and  necessary)  step 
towards  the  tradeoff  analyses  of  data-sharing  techniques  which  are 
part  of  the  specified  End  Products  of  Project  6710  (3.3.2). 
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the  storage  required  to  implement  this  version  of  the  Scheduler. 
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